Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
File:                     1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft (raw, json)
Hash identifier:          64z+g3zbPzInMhHbRqP32DxTaFKC1tra/i0wJrPu7Yg=
Subject key identifier:   EB:80:09:E5:EB:A1:BF:C2:90:B9:5B:31:67:01:94:73:9B:17:6B:C7
Authority key identifier: D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99
Certificate issuer:       /CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
Manifest number:          0171
Signing time:             Sat 23 Aug 2025 03:54:57 +0000
Manifest this update:     Sat 23 Aug 2025 03:54:57 +0000
Manifest next update:     Sat 30 Aug 2025 03:54:57 +0000
Files and hashes:         1: 1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl (hash: LeTOa2Glc8sZV79W9Jl0ORjAHO89CFIkNEZHRPhjKDU=)
                          2: C7C28CAC4A0711EEBE153131C4F9AE02.roa (hash: fULv4mZtsqynbOZKV5hkIaFsTcwy4lbv2N6/j51k2ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl
                          rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA9E, serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
        Validity
            Not Before: Aug 23 03:54:57 2025 GMT
            Not After : Aug 30 03:54:57 2025 GMT
        Subject: CN=68a93b91-a3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e4:93:6f:ac:f7:4a:36:e3:16:1d:e0:1f:23:
                    98:89:69:96:ee:a2:dc:33:07:0f:c4:0f:34:66:38:
                    57:aa:3b:86:0e:61:2f:f6:34:aa:1d:be:15:2c:e7:
                    52:1e:7e:45:dd:8d:5b:df:d1:37:5d:29:47:4d:17:
                    e1:29:41:4c:9f:85:8d:d8:a4:b6:54:8f:f5:f9:ac:
                    c7:b2:33:cf:5f:a4:77:9b:38:65:5b:51:d0:48:49:
                    a7:ba:68:5f:71:35:b4:69:89:38:58:d3:42:ee:9b:
                    c6:b5:30:9d:ef:04:d4:42:6d:ca:e5:e3:36:c8:92:
                    bd:08:d7:05:6c:5f:b4:6d:86:56:65:29:65:24:f6:
                    c0:2a:be:53:f9:ad:20:8d:b0:d0:0f:ec:ae:e2:06:
                    0f:ac:7a:8d:61:ea:a3:db:20:6a:e8:2a:c4:a2:5d:
                    46:21:47:d1:36:21:5d:d3:dc:e5:7f:fe:b0:23:07:
                    5a:b5:1a:66:43:00:be:89:33:31:d2:8e:11:df:15:
                    3f:7d:46:1c:b9:5f:16:3d:47:17:9c:da:be:83:46:
                    4d:ac:ed:df:d1:26:58:38:3c:9a:6b:bb:cd:fa:83:
                    e8:b3:a8:8c:3e:dd:ad:dd:0c:94:bb:bc:bf:fc:f1:
                    b4:0a:ca:24:d4:0e:d4:c3:d6:93:28:51:5b:b5:b6:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:80:09:E5:EB:A1:BF:C2:90:B9:5B:31:67:01:94:73:9B:17:6B:C7
            X509v3 Authority Key Identifier:
                keyid:D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:04:cb:bd:5a:fe:72:9c:16:a3:1b:c0:80:a1:14:92:90:b0:
         1e:4e:34:54:4f:fd:e5:10:b4:24:b4:9e:e7:3a:86:4c:22:3c:
         f7:aa:ca:e6:84:af:48:05:ab:07:7d:83:62:20:21:31:87:e3:
         40:c4:80:9b:54:be:4b:93:9a:97:3c:53:7a:f7:57:75:61:9b:
         10:a3:aa:9c:6a:85:c3:a6:74:a5:d4:57:7e:cd:e0:98:08:49:
         77:8b:bf:a0:85:42:78:df:ee:f7:5d:6a:b1:57:86:f6:35:0b:
         2b:62:09:f5:e6:bc:cd:82:61:88:6c:2f:15:86:f2:a1:9c:51:
         7b:a1:71:12:f4:9a:a5:6f:1c:5c:fb:71:1a:a9:10:7e:3d:8a:
         69:d9:7c:d4:6d:16:bc:05:04:5f:bd:c6:b3:35:91:fb:98:7c:
         98:f6:f0:0d:13:0e:89:dd:8b:ee:6d:da:24:dc:2a:0d:82:2e:
         db:11:d7:3f:05:7d:ee:d3:0f:27:eb:1b:63:49:4f:ac:0f:32:
         c0:bf:94:70:dd:7b:57:2e:0e:e1:61:15:ee:87:e0:db:09:6b:
         51:a4:79:e2:66:16:25:7d:2c:61:36:fe:05:2f:96:2d:43:b6:
         36:da:e6:23:0c:07:ee:67:71:63:98:df:00:f9:67:2f:63:a1:
         f3:b4:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:08 2025 by rpki-client